Chinese Interest Rate
v3.2.0Monitor China bank deposit and government bond interest rates daily and receive alerts when any rate changes.
⭐ 1· 88·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (monitor China interest rates and alert on changes) matches the delivered artifacts: SKILL.md documents tracked rates and schedule, and scripts/check_rates.py fetches public sources (Yahoo Finance, shibor sites, PBoC pages) and compares to data/rates.json. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md instructs either running the bundled Python script or feeding the agent-fetched JSON into it. The instructions only reference the skill's own files (data/config.json, data/rates.json, scripts/check_rates.py) and public web endpoints relevant to rate data. There are no instructions to read unrelated system files or exfiltrate data to external endpoints.
Install Mechanism
There is no install spec; the skill is instruction-plus-script only. That minimizes risk — no third-party packages or downloads are installed. The bundled script uses stdlib urllib and writes to the skill's data directory.
Credentials
The skill declares no required environment variables, credentials, or config paths. The script makes outbound HTTP requests to public data sources but does not require secrets or access to unrelated services. Requested access is proportional to the stated function.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only persists its own data to data/rates.json. Autonomous invocation is allowed (platform default) but is not combined with broad privileges here.
Assessment
This skill appears to do what it says: the included Python script fetches public rate data, compares it with local data/rates.json, and prints notifications when there are changes. It does not ask for credentials or install external packages. Things to consider before installing: (1) the script performs outbound HTTP requests to public sites (Yahoo Finance, shibor sites, PBoC), so network access is required; (2) notifications are printed to stdout inside a '[NOTIFY]' block — integrating push delivery depends on how your agent/runtime captures and forwards those prints; (3) if you require stricter network controls or auditing, review scripts/check_rates.py yourself before running; (4) the data-parsing (HTML regex) is brittle but not malicious. If you need the skill to push alerts to a specific channel (email, Slack), confirm integration behavior or add a trusted delivery mechanism rather than relying on stdout parsing.Like a lobster shell, security has layers — review code before you run it.
latestvk971c8f6m7kej8dkmhnt7dkgws83x59f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.